Re: Re[4]: [PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-20 Thread - Edwin -
Hi, On Tue, 21 Oct 2003 14:02:58 +1000 Tom Rogers <[EMAIL PROTECTED]> wrote: > Hi, > > Tuesday, October 21, 2003, 1:40:20 PM, you wrote: > > OMH> One other thing.. What's the difference in $$ for a site to be > OMH> https rather than http?? Cos you need to get a verisign cert > OMH> or somethi

Re[4]: [PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-20 Thread Tom Rogers
Hi, Tuesday, October 21, 2003, 1:40:20 PM, you wrote: OMH> One other thing.. What's the difference in $$ for a site to be https rather OMH> than http?? Cos you need to get a verisign cert or something?? Just OMH> asking.. I use bulkregister.com and if you are a member the cost is $88.00 per ye

RE: Re[2]: [PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-20 Thread Ow Mun Heng
>>The encryption happens server side and is really only intended to encrypt >>variables that are passed to web client such as product id and stuff. The only >>way to do secure login and prevent sniffing is to use ssl which will encrypt the >>traffic to and from the client. I suppose javascript coul

Re[2]: [PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-20 Thread Tom Rogers
Hi, Tuesday, October 21, 2003, 12:52:33 PM, you wrote: OMH> Hi Tom, OMH> I've got a question for you regarding this encrypt class of yours.. Just OMH> wanted to understand how well it would work against a guy with a sniffer OMH> such as ethereal. (presuming he's on the LAN/wifi to access the app)

RE: [PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-20 Thread Ow Mun Heng
Hi Tom, I've got a question for you regarding this encrypt class of yours.. Just wanted to understand how well it would work against a guy with a sniffer such as ethereal. (presuming he's on the LAN/wifi to access the app) How does the encryption happen?? Client side or server side? How does it g

[PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-19 Thread Ryan A
Hi Tom, A mighty big thanks for that class, I'll read up on classes tonight and try to understand it. Thanks for the tips on how to use it too. > To help prevent problems with stuff like this it is always a good idea to declare > variables before using them, especially with sessions: > > $num = 0;

[PHP] Re: Tom->Re: [PHP] session hijacking

2003-10-19 Thread Tom Rogers
Hi, Monday, October 20, 2003, 10:38:23 AM, you wrote: RA> Hi Tom, RA> Thanks for replying. >> encrypt the numbers and decrypt them before use, if they wont decrypt to a RA> nuber >> ditch the connection. If you need a class for that I can send it to you RA> Yes please, that should help, but am n